(Fwd) RE: How do you audit a DBA?

From: Eric D. Pierce <PierceED_at_csus.edu>
Date: Mon, 10 Sep 2001 09:20:18 -0700
Message-ID: <F001.0038848D.20010910091019@fatcity.com>

trying again...

Forwarded message follows -------

The destination address you specified for your message could not be reached because of a locking problem. Your message is being returned to you so that you can resend it if you desire. The locking problem should be resolved within a few minutes. Sorry for the inconvenience.

Original Message ------ T o : O R A C L E - L @ f a t c i t y . c o m D a t e : Fri, 7 Sep 2001 17:21:28 -0700 S u b j e c t : RE: How do you audit a DBA? C C : c a r m i c h r @ h o t m a i l . c o m

R-

This was probably already answered, but if not:

At least for Win2000 (recent training), you have to enter an administrator password when you install the OS (standard "manual" install). There may be some exceptions for "remote" installs, but I'm not sure.

There is some kind of SA lore about adding "special" characters to a "long" NT password to prevent/thwart cracking (at sites requiring higher than "normal" security), but I don't have my training notes at hand.

Password generator:

http://www.winguides.com/security/password.php

additional background:

-
http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=15260 -
http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=15261 -
http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=14774 -

(click "related" articles for a lot more stuff: http://search.win2000mag.net/query.html?col=0&ady=6&amo=2&ayr=2001&bdy=13&bmo=2&byr=2001&lk=1&rf=0&ht=0&qp=&qt=&qs=&qc=&pw=100%25&ws=0&la=en&qm=1&st=1&nh=10&oq=&rq=0&si=0&fs=h ttp%3A%2F%2Fwww%2Ewindows2000faq%2Ecom%2FArticles%2FIndex%2Ecfm%3FArticleID%3D14774&t=How%20can%20I%20check%20the%20security%20of%20my%20passwords%3F )

NT password crack:

> http://www.atstake.com/research/lc3/

"Hardening Windows 2000" book:

http://www.systemexperts.com/win2k.html

(free .pdf chapter, TOC, utilities:
http://www.systemexperts.com/win2k/HardenWin2K.html )

http://www.sysinternals.com/ntw2k/utilities.shtml -
reset "lost" administrator password utility: http://www.winternals.com/products/repairandrecovery/0locksmith.asp (not sure exactly if it will work without a previous install)

regards,
ep

>
> ------------------------------
>
> From: "Rachel Carmichael" <carmichr_at_hotmail.com>
> Date: Thu, 06 Sep 2001 12:39:35 +0000
> Subject: RE: How do you audit a DBA?

[via ORACLE-L Digest -- Volume 2001, Number 250]

> but doesn't there have to be ONE account/role in NT that can assign all
> the others? how else could you set up a role or continue to set them up?

...

End of forwarded message ------- -- Please see the official ORACLE-L FAQ: http://www.orafaq.com -- Author: Eric D. Pierce INET: PierceED_at_csus.edu

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Sep 10 2001 - 11:20:18 CDT